Lucene search
+L

34214 matches found

Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•7 views

PT-2026-106763

Dell Container Storage Modules, versions prior to 1.18.0, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

7.7CVSS5.9AI score0.00377EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•7 views

PT-2026-106772

Dell Container Storage Modules, versions prior to 1.18.0, contains a Missing Authorization vulnerability in the Dell CSI Driver for PowerMax - csireverseproxy . An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Unauthorized access...

6.1CVSS5.9AI score0.00229EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/06 12:00 a.m.•5 views

CVE-2026-61421: Use of Hard-coded Credentials

Dell Container Storage Modules, versions prior to 1.18.0, contains an Use of Hard-coded Credentials vulnerability in the CSM Authorization. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

9.8CVSS6.1AI score0.00344EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•4 views

PT-2026-107065

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A use after free issue exists in the Storage component. This allows a remote attacker who has already compromised the renderer process to execute arbitrary code outside the sandbox by...

9.6CVSS7.2AI score0.00438EPSS
SaveExploits0References252
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/06 12:00 a.m.•4 views

CVE-2026-67270: Improper Certificate Validation

Dell Container Storage Modules CSM versions prior to 1.18.0, contains an Improper Certificate Validation vulnerability in the proxy-server component. An unauthenticated adjacent network attacker could potentially exploit this vulnerability, leading to information exposure of storage backend...

8.2CVSS5.9AI score0.00117EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•8 views

PT-2026-106771

Dell Container Storage Modules, versions prior to 1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csi-powerflex; csi-powermax; csi-powerstore. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to...

5.4CVSS5.9AI score0.00299EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/06 12:00 a.m.•6 views

CVE-2026-98232: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: scsi: core: Validate MODE SENSE lengths in scsicdlenable scsicdlenable uses length fields returned by MODE SENSE to locate the ATA feature mode page in a 64-byte stack buffer. A target can report a total length shorter than its...

5.9AI score0.00175EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•9 views

PT-2026-107279

Name of the Vulnerable Software and Affected Versions Backstage versions prior to 0.17.8 Description The @backstage/backend-defaults package contains improper input validation within cloud storage URL readers. An attacker possessing write access to a cloud storage bucket utilized by the framework...

4.4CVSS5.7AI score0.00286EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•8 views

PT-2026-107270

Name of the Vulnerable Software and Affected Versions Backstage versions prior to 2.2.4 Description The @backstage/plugin-techdocs-backend package contains improper authorization enforcement for static content. An authenticated user with access to one TechDocs documentation site can craft a URL t...

6.5CVSS5.5AI score0.00287EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/06 12:00 a.m.•7 views

CVE-2026-63691: Missing Authorization

Dell Container Storage Modules, versions prior to 1.18.0, contains a Missing Authorization vulnerability in the Dell CSI Driver for PowerMax - csireverseproxy . An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Unauthorized access...

6.1CVSS5.9AI score0.00229EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/06 12:00 a.m.•7 views

CVE-2026-54472: Use of Hard-coded Credentials

Dell Container Storage Modules, versions prior to 1.18.0, contains an Use of Hard-coded Credentials vulnerability in the csm-docs. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.9.8...

9.8CVSS6.1AI score0.00509EPSS
SaveExploits0References3
Redos
Redos
•added 2026/10/06 12:00 a.m.•9 views

ROS-20261006-73-1003

The vulnerability of the setnewpassword function in the drivers/platform/x86/dell/dell-wmi-sysman/passwordattr-interface.c file of the Linux operating system’s X86 device driver module is related to the unencrypted storage of critical information. Exploiting this vulnerability could allow an...

5.5CVSS6.1AI score0.00125EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/06 12:00 a.m.•9 views

CVE-2026-63688: Missing Authentication for Critical Function

Dell Container Storage Modules CSM, versions prior to v1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-storage gRPC server. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to...

10CVSS6.2AI score0.00791EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•6 views

PT-2026-106765

Dell Container Storage Modules, versions prior to 1.18.0, contains an Improper Neutralization of Special Elements Used in a Template Engine vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

9.6CVSS6.1AI score0.0042EPSS
SaveExploits0References3
OPENSUSE Linux
OPENSUSE Linux
•added 2026/10/06 12:00 a.m.•6 views

python313-azure-storage-queue-12.18.0-1.1 on GA media (moderate)

python313-azure-storage-queue-12.18.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11944-1 Rating: moderate Cross-References: CVE-2022-30187 CVSS scores: CVE-2022-30187 SUSE : 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Tumbleweed An update that solves one...

4.7CVSS6.6AI score0.00532EPSS
SaveExploits0
Broadcom
Broadcom
•added 2026/10/06 12:00 a.m.•12 views

Unprivileged Local Execution of Kernel-Level Diagnostic Tests within Brocade Fabric OS

: An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An unprivileged local user can invoke privileged hardware tests, force system error conditions, reset...

7CVSS5.7AI score0.00128EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/10/06 12:00 a.m.•6 views

Linux Distros Unpatched Vulnerability : CVE-2026-98232

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: core: Validate MODE SENSE lengths in scsicdlenable scsicdlenable uses length fields returned by MODE SENSE to locate the ATA feature mode page in a 64-byt...

5.9AI score0.00175EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/10/05 10:53 p.m.•18 views

EUVD-2026-90973

Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path...

9.3CVSS5.9AI score0.00213EPSS
SaveExploits0References10
Kitploit
Kitploit
•added 2026/10/05 10:38 p.m.•15 views

CVE-2023-43317

CVE-2023-43317 يمكن لمستخدم عادي رفع صلاحياته عبر معامل userPermissionsLIst في مكون Session Storage، للحصول على وصول غير مصرح به إلى الموارد والميزات الإدارية. قد يؤدي ذلك إلى وصول غير مصرح به للبيانات، وتعديل البيانات، وإجراءات أخرى تقتصر عادةً على المسؤولين. المنتج المعرض للخطر:- Coign Card...

8.8CVSS8.2AI score0.01079EPSS
SaveExploits2
IBM Security Bulletins
IBM Security Bulletins
•added 2026/10/05 9:38 p.m.•14 views

Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale and the HDFS layer are now fixed in 5.2.3.10 or higher and 6.0.1.1 or higher

Summary The following vulnerabilities, which can affect IBM Storage Scale and the HDFS layer and could provide weaker-than-expected security, are now fixed in Storage Scale 5.2.3.10 or higher and 6.0.1.1 or higher Vulnerability Details CVEID:CVE-2026-46340 DESCRIPTION: Netty is a network...

9.8CVSS6.6AI score0.00849EPSS
SaveExploits5Affected Software1
Rows per page
Query Builder